Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: nGvQDURQhv1BdHfSkOeJhlMvhyuoSFjvfSQy/ILg5QE=
Subject key identifier: 04:FC:38:B6:2E:A4:37:67:38:74:87:7A:31:4D:23:11:11:72:1C:3A
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 0197B7EA6991A380A062155598AC37D0F6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0627
Signing time: Sat 28 Jun 2025 19:01:22 +0000
Manifest this update: Sat 28 Jun 2025 19:01:22 +0000
Manifest next update: Sun 29 Jun 2025 19:01:22 +0000
Files and hashes: 1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: dOGLdeLKSvbrCaY++rkoq4Zuish3O8GM6RAPjcTDRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:69:91:a3:80:a0:62:15:55:98:ac:37:d0:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jun 28 19:01:22 2025 GMT
Not After : Jun 29 19:01:22 2025 GMT
Subject: CN=04fc38b62ea437673874877a314d231111721c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:71:6f:13:9c:1a:da:94:a6:49:72:eb:36:
b8:3c:c5:0d:45:84:75:d2:fa:bc:a6:93:13:1a:3c:
98:a7:73:02:65:95:cd:7a:41:12:30:2f:90:b9:56:
29:a0:b5:31:7d:c4:96:f7:d2:2e:e9:e6:d8:98:e4:
a4:d9:df:35:8d:36:f0:33:12:83:f3:b0:08:dc:85:
8d:29:bf:25:70:38:aa:6a:6e:08:38:61:75:f3:3a:
9a:8e:b3:97:57:75:9a:1e:66:0f:90:6f:ae:25:c8:
f4:49:ee:fe:06:48:46:52:bd:b6:c3:ca:8b:c1:58:
8a:5e:c1:8d:18:27:80:c7:1d:25:b1:ea:a5:56:ba:
00:0a:37:fc:86:34:d9:22:3f:f1:fc:1d:8d:fe:31:
bb:38:d9:be:25:dc:b3:a3:70:09:f1:82:c1:57:29:
ea:0b:04:49:75:59:47:01:7a:ee:f0:68:01:18:0f:
a7:95:bf:da:d2:53:84:46:50:6b:0e:02:80:a9:dd:
c3:57:93:f6:30:f2:33:1f:7d:a4:cd:02:ef:1f:65:
6b:df:6d:80:ef:ec:d8:27:17:eb:96:c8:27:a3:18:
61:da:41:81:af:87:8b:7b:7e:54:7d:9f:ab:0b:95:
b6:51:a0:82:32:79:6f:aa:f8:cc:6a:81:f3:32:74:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FC:38:B6:2E:A4:37:67:38:74:87:7A:31:4D:23:11:11:72:1C:3A
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:95:25:c9:d8:0d:60:9e:bd:d6:d2:0d:ee:0f:fe:26:4f:c1:
04:8f:97:65:2c:cb:ad:18:cc:4b:0b:f5:82:2f:52:eb:32:d6:
57:97:fc:b2:b6:1c:d5:84:35:0e:8a:c8:f1:d9:9c:83:3c:f2:
89:f9:76:79:9e:16:49:93:d3:2a:22:e6:e5:9b:cd:c4:6c:31:
14:12:ca:71:b5:14:13:4e:24:ae:c1:83:9b:88:96:5d:42:f2:
a3:97:bc:0a:65:77:eb:17:d0:02:7c:71:2e:18:ce:45:f8:3b:
d6:b0:21:05:db:c1:be:47:15:06:31:a9:12:c0:94:fa:18:1a:
6b:e3:2f:6b:16:97:dd:7a:72:0c:50:64:aa:05:58:3c:6d:09:
e6:57:ce:a7:31:15:54:5d:60:fc:a7:7a:5b:69:cd:f6:d6:27:
44:b9:29:69:0a:5b:64:0f:6c:bb:2b:1f:0a:1c:8f:f5:98:68:
b5:11:4a:da:d2:79:66:43:71:ed:68:b1:b9:a9:9a:dc:20:bf:
15:f0:80:e5:46:14:f9:a3:d9:eb:a4:cb:c3:9f:e8:cf:cf:56:
b1:f5:78:6d:8a:ff:d3:e0:28:0f:f6:ce:b1:19:f5:3d:da:7a:
98:14:19:b5:45:12:67:c7:2f:40:11:49:22:ad:a3:2d:f0:91:
09:d6:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:02 2025 by rpki-client